This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/09d137-477b-4efe-a3d3-4b23956fbd86/1/V_9jRl4u_GQEezWDQos1yT-0bqE.roa File: V_9jRl4u_GQEezWDQos1yT-0bqE.roa (raw, json) Hash identifier: F7HIunKap/oz5qtM7/jZgccS28Y+qRZ8R7fBgjRlXdI= Subject key identifier: 57:FF:63:46:5E:2E:FC:64:04:7B:35:83:42:8B:35:C9:3F:B4:6E:A1 Certificate issuer: /CN=db9d197fbbee2a1dccb4f55722a8210d3105b042 Certificate serial: 019B79EBB1EF73678FC5A751BF75B6D442D7 Authority key identifier: DB:9D:19:7F:BB:EE:2A:1D:CC:B4:F5:57:22:A8:21:0D:31:05:B0:42 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/250Zf7vuKh3MtPVXIqghDTEFsEI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/09d137-477b-4efe-a3d3-4b23956fbd86/1/V_9jRl4u_GQEezWDQos1yT-0bqE.roa Signing time: Thu 01 Jan 2026 14:17:28 +0000 ROA not before: Thu 01 Jan 2026 14:17:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12635 IP address blocks: 2001:4b69::/32 maxlen: 32 2001:4b6c::/30 maxlen: 30 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/09d137-477b-4efe-a3d3-4b23956fbd86/1/250Zf7vuKh3MtPVXIqghDTEFsEI.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/09d137-477b-4efe-a3d3-4b23956fbd86/1/250Zf7vuKh3MtPVXIqghDTEFsEI.mft rsync://rpki.ripe.net/repository/DEFAULT/250Zf7vuKh3MtPVXIqghDTEFsEI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:eb:b1:ef:73:67:8f:c5:a7:51:bf:75:b6:d4:42:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=db9d197fbbee2a1dccb4f55722a8210d3105b042 Validity Not Before: Jan 1 14:17:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=57ff63465e2efc64047b3583428b35c93fb46ea1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:cf:9e:6e:05:34:92:ce:59:4c:e9:1e:83:85: c5:ab:e1:fc:84:44:89:76:9a:49:96:b7:70:36:0e: f4:6d:aa:a5:40:63:c0:05:9b:b5:5f:ce:bf:45:d8: 5b:8c:c7:a7:4a:f2:35:a6:af:73:e8:6c:37:13:ee: 41:b9:42:c2:5d:35:14:10:c9:23:b4:0f:70:4b:d4: af:79:0c:af:90:8e:dc:e1:eb:6c:ff:86:94:a7:f3: e4:f4:8f:cd:05:fa:e9:d5:15:f6:b1:05:88:48:67: 45:08:e4:86:1b:c8:14:42:a8:3e:06:6b:9f:67:e5: 90:d0:2c:d3:9e:19:92:49:e0:ef:d2:c3:33:c9:16: f8:ce:12:fe:be:95:79:b0:40:82:42:5b:a9:07:9a: 3f:08:5e:f9:3f:01:3f:cf:89:5e:e7:91:08:42:72: f6:d8:34:95:63:89:77:71:2f:21:cd:f8:29:24:18: f6:6c:a7:a6:db:53:48:0d:5a:0a:9d:b3:04:01:20: 6f:82:07:ba:21:72:65:ee:db:e7:e6:db:76:87:59: e7:a9:b9:58:28:84:dd:f5:a2:dd:22:cd:a8:f7:59: 21:23:a3:19:ca:59:70:c7:f1:e5:2b:09:02:e4:37: 3c:18:61:60:26:aa:7f:24:ef:1c:12:86:59:8e:8e: 78:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:FF:63:46:5E:2E:FC:64:04:7B:35:83:42:8B:35:C9:3F:B4:6E:A1 X509v3 Authority Key Identifier: keyid:DB:9D:19:7F:BB:EE:2A:1D:CC:B4:F5:57:22:A8:21:0D:31:05:B0:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/250Zf7vuKh3MtPVXIqghDTEFsEI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/09d137-477b-4efe-a3d3-4b23956fbd86/1/V_9jRl4u_GQEezWDQos1yT-0bqE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/09d137-477b-4efe-a3d3-4b23956fbd86/1/250Zf7vuKh3MtPVXIqghDTEFsEI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:4b69::/32 2001:4b6c::/30 Signature Algorithm: sha256WithRSAEncryption 9c:89:25:83:1a:bf:40:55:46:19:df:b3:14:5e:b3:11:07:d0: 7d:25:cc:dc:59:c7:88:30:05:2f:a7:a9:41:d2:1b:9d:ff:f5: 14:18:17:93:25:69:e8:5a:59:05:c4:50:33:ab:0a:c6:7f:c1: 83:9c:9b:a2:1c:15:be:d1:59:4f:b7:07:0a:5a:ae:26:bd:0a: c6:5b:13:52:3a:b6:83:1b:fc:6e:9f:d1:3b:ff:d3:88:5f:b9: 5a:6c:7c:79:ba:09:df:6d:c3:ad:f2:49:a8:18:e7:9f:6a:18: 94:1e:4b:b7:99:b4:f9:ee:df:d1:d6:c5:38:88:ff:33:e2:b8: 3b:2d:31:f7:94:76:71:06:a6:70:a3:ac:f7:85:5e:c7:a8:ba: 2b:63:8c:cb:0a:7b:d8:e5:c3:d1:3e:f5:7b:c2:9e:30:ce:3a: 14:df:3e:3d:1a:51:e2:38:0a:30:18:2d:12:59:2d:eb:16:e7: f5:70:6a:f5:c2:e8:ab:46:a8:fb:ee:5d:d9:b4:c0:fc:b8:25: 92:9a:00:37:0d:dd:17:a2:e1:fb:4e:7a:7e:0f:52:69:7b:67: f2:60:52:16:e9:c2:a0:e1:68:7e:85:25:13:d9:74:02:df:9f: 95:68:04:d2:d5:9c:0a:65:9c:25:1c:c4:ca:d7:7d:e1:4c:76: 1e:c6:12:20 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt567Hvc2ePxadRv3W21ELXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRiOWQxOTdmYmJlZTJhMWRjY2I0ZjU1NzIyYTgyMTBkMzEw NWIwNDIwHhcNMjYwMTAxMTQxNzI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1N2ZmNjM0NjVlMmVmYzY0MDQ3YjM1ODM0MjhiMzVjOTNmYjQ2ZWExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA08+ebgU0ks5ZTOkeg4XFq+H8hESJ dppJlrdwNg70baqlQGPABZu1X86/RdhbjMenSvI1pq9z6Gw3E+5BuULCXTUUEMkj tA9wS9SveQyvkI7c4ets/4aUp/Pk9I/NBfrp1RX2sQWISGdFCOSGG8gUQqg+Bmuf Z+WQ0CzTnhmSSeDv0sMzyRb4zhL+vpV5sECCQlupB5o/CF75PwE/z4le55EIQnL2 2DSVY4l3cS8hzfgpJBj2bKem21NIDVoKnbMEASBvgge6IXJl7tvn5tt2h1nnqblY KITd9aLdIs2o91khI6MZyllwx/HlKwkC5Dc8GGFgJqp/JO8cEoZZjo54RQIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFFf/Y0ZeLvxkBHs1g0KLNck/tG6hMB8GA1UdIwQY MBaAFNudGX+77iodzLT1VyKoIQ0xBbBCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMjUwWmY3dnVLaDNNdFBWWElxZ2hEVEVGc0VJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS8wOWQxMzctNDc3Yi00ZWZlLWEzZDMt NGIyMzk1NmZiZDg2LzEvVl85alJsNHVfR1FFZXpXRFFvczF5VC0wYnFFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYS8wOWQxMzctNDc3Yi00ZWZlLWEzZDMtNGIyMzk1NmZiZDg2 LzEvMjUwWmY3dnVLaDNNdFBWWElxZ2hEVEVGc0VJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAAjAOAwUAIAFLaQMF AiABS2wwDQYJKoZIhvcNAQELBQADggEBAJyJJYMav0BVRhnfsxResxEH0H0lzNxZ x4gwBS+nqUHSG53/9RQYF5MlaehaWQXEUDOrCsZ/wYOcm6IcFb7RWU+3Bwparia9 CsZbE1I6toMb/G6f0Tv/04hfuVpsfHm6Cd9tw63ySagY559qGJQeS7eZtPnu39HW xTiI/zPiuDstMfeUdnEGpnCjrPeFXseouitjjMsKe9jlw9E+9XvCnjDOOhTfPj0a UeI4CjAYLRJZLesW5/VwavXC6KtGqPvuXdm0wPy4JZKaADcN3Rei4ftOen4PUml7 Z/JgUhbpwqDhaH6FJRPZdALfn5VoBNLVnAplnCUcxMrXfeFMdh7GEiA= -----END CERTIFICATE-----Generated at Sun Jan 25 22:51:00 2026 by rpki-client